Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa
File:                     35868697-b72e-333d-a100-dc3b5fc1f05e.roa (raw, json)
Hash identifier:          jfTC/axYgnhPkRez5Zc+1GG+x5X3Tm4Hgf4JzXR5arM=
Subject key identifier:   65:F4:E3:24:84:81:A9:C0:84:88:41:C9:59:F0:16:79:FC:CC:63:E8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AA6F63584EFC1844E33544300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     6167
IP address blocks:        174.254.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:35:84:ef:c1:84:4e:33:54:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=1fe48ee8-3e18-4d77-9cda-233048176cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:3e:3c:36:6d:cb:b6:cd:a0:f2:27:2f:7b:
                    ca:47:5e:a1:c6:9a:0d:f7:a6:3a:22:0b:66:32:f7:
                    69:b2:71:03:43:b4:32:9d:81:63:48:93:0b:d8:1a:
                    e2:21:f7:7b:a9:36:4f:10:e9:f6:69:fa:01:c3:16:
                    1c:e0:16:0e:ce:c0:4e:ba:3a:de:42:fc:80:39:b1:
                    b8:70:3b:69:59:16:62:01:8b:83:e5:33:09:53:67:
                    de:60:cb:02:15:1a:f3:ae:4c:cc:18:6f:57:24:ea:
                    98:b9:58:07:69:84:5d:25:22:af:53:7b:16:7d:5f:
                    15:3c:9b:a0:cb:fb:50:46:cf:f9:11:1d:3f:06:60:
                    1a:8b:1d:b7:07:02:ee:04:34:84:18:53:12:00:ac:
                    b9:5c:d4:7f:14:52:04:4d:2e:21:cb:e5:fa:4d:bd:
                    fc:b5:26:9c:86:23:2e:ad:8e:28:e7:2a:5f:bf:47:
                    81:56:89:90:29:73:81:f6:e2:ce:4f:ce:5b:04:18:
                    e0:40:4c:51:20:a2:06:e6:d6:b8:0d:3f:72:0a:71:
                    3e:33:c2:06:eb:48:7e:aa:db:62:0e:63:a3:04:84:
                    78:cd:60:7d:71:af:a1:ae:91:84:d6:5c:28:0f:75:
                    bf:4b:dc:f1:e4:8a:52:3f:fb:3b:4c:1b:f0:4b:de:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F4:E3:24:84:81:A9:C0:84:88:41:C9:59:F0:16:79:FC:CC:63:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/35868697-b72e-333d-a100-dc3b5fc1f05e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.254.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:d2:da:f3:a8:93:d1:af:a2:1d:0d:6a:38:14:1e:82:6a:
         b4:43:95:e5:79:a4:18:90:ad:40:ed:7e:a4:a8:9e:fc:81:66:
         75:a6:3f:0e:f3:4d:bc:2d:30:d6:9a:f1:f3:dc:99:2f:2b:f3:
         ec:43:1f:43:95:65:ae:bf:90:50:8a:57:50:c0:dc:b9:f9:d6:
         f8:f1:e7:20:e4:63:2c:50:7d:7e:79:5f:0f:cd:e7:77:c0:c6:
         31:cd:5d:42:8b:7a:63:17:ae:d8:f8:24:af:04:84:94:8f:c9:
         34:19:f6:04:70:b8:a4:4c:08:2a:f4:cb:b8:06:aa:08:f7:5e:
         ec:a8:2c:ed:ca:24:d9:bf:18:89:b8:5b:4a:97:3f:94:49:50:
         22:03:c1:c7:71:e0:4b:b0:75:20:08:ec:40:6b:d8:6c:52:b3:
         46:e3:e8:06:f0:63:12:22:d2:cf:65:2a:df:f4:54:ee:07:a2:
         64:d9:cf:f0:a1:2e:04:5f:43:94:0b:b4:6a:b1:17:9c:7d:1f:
         a2:66:99:d9:9a:d8:0a:5d:b3:13:ea:d9:9a:32:0c:9b:a1:45:
         66:4a:6f:db:a8:57:fa:6f:50:92:96:c7:96:d9:27:1b:97:e7:
         06:59:12:e4:67:a2:a3:13:e0:b3:98:13:49:cf:1f:b8:61:0f:
         69:7c:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:12:25 2025 by rpki-client